CVE-2022-2795

EPSS 0.53%
Veröffentlicht 21.09.2022 11:15:09
Zuletzt bearbeitet 29.11.2024 12:15:04
Quelle security-officer@isc.org
CVE-Watchlists
Login
Unerledigt
Login

By flooding the target resolver with queries exploiting this flaw an attacker can significantly impair the resolver's performance, effectively denying legitimate clients access to the DNS resolution service.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 0 Referenzen 12

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Isc ≫ Bind SwEdition- Version >= 9.0.0 < 9.16.33

Isc ≫ Bind SwEdition- Version >= 9.18.0 < 9.18.7

Isc ≫ Bind SwEdition- Version >= 9.19.0 < 9.19.5

Isc ≫ Bind Version9.9.3 Updates1 SwPlatformsupported_preview

Isc ≫ Bind Version9.9.3 Updates1 SwEditionsupported_preview

Isc ≫ Bind Version9.9.12 Updates1 SwEditionsupported_preview

Isc ≫ Bind Version9.9.13 Updates1 SwEditionsupported_preview

Isc ≫ Bind Version9.10.5 Updates1 SwEditionsupported_preview

Isc ≫ Bind Version9.10.7 Updates1 SwEditionsupported_preview

Isc ≫ Bind Version9.11.3 Updates1 SwEditionsupported_preview

Isc ≫ Bind Version9.11.5 Updates3 SwPlatformsupported_preview

Isc ≫ Bind Version9.11.5 Updates3 SwEditionsupported_preview

Isc ≫ Bind Version9.11.5 Updates5 SwEditionsupported_preview

Isc ≫ Bind Version9.11.5 Updates6 SwEditionsupported_preview

Isc ≫ Bind Version9.11.6 Updates1 SwEditionsupported_preview

Isc ≫ Bind Version9.11.7 Updates1 SwEditionsupported_preview

Isc ≫ Bind Version9.11.8 Updates1 SwEditionsupported_preview

Isc ≫ Bind Version9.11.12 Updates1 SwEditionsupported_preview

Isc ≫ Bind Version9.11.14-s1 SwEditionpreview

Isc ≫ Bind Version9.11.19-s1 SwEditionpreview

Isc ≫ Bind Version9.11.21 Updates1 SwEditionsupported_preview

Isc ≫ Bind Version9.11.27 Updates1 SwEditionsupported_preview

Isc ≫ Bind Version9.11.29 Updates1 SwEditionsupported_preview

Isc ≫ Bind Version9.11.35 Updates1 SwEditionsupported_preview

Isc ≫ Bind Version9.11.37 Updates1 SwEditionsupported_preview

Isc ≫ Bind Version9.16.8 Updates1 SwEditionsupported_preview

Isc ≫ Bind Version9.16.11 Updates1 SwEditionsupported_preview

Isc ≫ Bind Version9.16.13 Updates1 SwEditionsupported_preview

Isc ≫ Bind Version9.16.21 Updates1 SwEditionsupported_preview

Isc ≫ Bind Version9.16.32 Updates1 SwEditionsupported_preview

Debian ≫ Debian Linux Version10.0

Debian ≫ Debian Linux Version11.0

Fedoraproject ≫ Fedora Version35

Fedoraproject ≫ Fedora Version36

Fedoraproject ≫ Fedora Version37

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.53%	0.663

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5.3	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
security-officer@isc.org	5.3	3.9	1.4	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Es wurden noch keine Informationen zu CWE veröffentlicht.

https://security.gentoo.org/glsa/202210-25

Third Party Advisory

http://www.openwall.com/lists/oss-security/2022/09/21/3

Patch

Third Party Advisory

Mailing List

https://kb.isc.org/docs/cve-2022-2795

Patch

Vendor Advisory

https://lists.debian.org/debian-lts-announce/2022/10/msg00007.html

Third Party Advisory

Mailing List

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CV4GQWBPF7Y52J2FA24U6UMHQAOXZEF7/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/MRHB6J4Z7BKH4HPEKG5D35QGRD6ANNMT/

https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/YZJQNUASODNVAWZV6STKG5SD6XIJ446S/

https://www.debian.org/security/2022/dsa-5235

Third Party Advisory

https://security.netapp.com/advisory/ntap-20241129-0002/

https://nvd.nist.gov/vuln/detail/CVE-2022-2795

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2022-2795

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2022-2795

EUVD